OWASP Odyssey: A Complete Guide to Secure Software Practices

Abstract

Security in web application development is a comprehensive process that needs to be started early in the development cycle.
Modern frameworks provide important security tools, but they are not enough to secure applications. They must be accompanied by good development practices and sound software design. Vulnerabilities can occur not only at the framework level, but also due to inadequate access policies, poor data validation, and insufficient authentication mechanisms. Adoption of the Open Web Application Security Project guidelines and the OWASP Application Security Verification Standard standards is critical to mitigating these vulnerabilities, as is familiarity with Common Vulnerabilities and Exposures and Common Vulnerabilities and Exposures associated with the technologies used.